CVE-2026-49774: Filipe Nasc Rd Station

Critical severity, CVSS 9.9. EPSS: 0.5% chance of exploitation in the next 30 days.

Improper Control of Generation of Code ('Code Injection') vulnerability in Filipe Nasc RD Station allows Remote Code Inclusion. This issue affects RD Station: from n/a through 5.6.0.

Affected products

• Filipe Nasc Rd Station: up to and including 5.6.0

Published 2026-06-16. Last modified 2026-06-17.